PHP 8.2.23 Release Announcement

The PHP development team announces the immediate availability of PHP 8.2.23. This is a bug fix release.

All PHP 8.2 users are encouraged to upgrade to this version.

For source downloads of PHP 8.2.23 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.2.23 (tar.gz)
  sha256: f5cb5f0e063bcc632c60a8f26af63b19d5f924f1fc54b4471d88cfaa865d6917
• PHP 8.2.23 (tar.bz2)
  sha256: f7c90cda7a3c1de01f3bfb7b469d52dec9eba2f3b83320836004f9c2eecae26b
• PHP 8.2.23 (tar.xz)
  sha256: 81c5ae6ba44e262a076349ee54a2e468638a4571085d80bff37f6fd308e1d8d5

Change Log

• core
  • Fixed bug GH-15020 (Memory leak in Zend/Optimizer/escape_analysis.c).
  • Fixed bug GH-15023 (Memory leak in Zend/zend_ini.c).
  • Fixed bug GH-13330 (Append -Wno-implicit-fallthrough flag conditionally).
  • Fix uninitialized memory in network.c.
  • Fixed bug GH-15108 (Segfault when destroying generator during shutdown).
  • Fixed bug GH-15275 (Crash during GC of suspended generator delegate).
• curl
  • Fixed case when curl_error returns an empty string.
• dom
  • Fix UAF when removing doctype and using foreach iteration.
• ffi
  • Fixed bug GH-14286 (ffi enum type (when enum has no name) make memory leak).
• hash
  • Fix crash when converting array data for array in shm in xxh3.
• intl
  • Fixed bug GH-15087 (IntlChar::foldCase()'s $option is not optional).
• opcache
  • Fixed bug GH-13817 (Segmentation fault for enabled observers after pass 4).
  • Fixed bug GH-13775 (Memory leak possibly related to opcache SHM placement).
• output
  • Fixed bug GH-15179 (Segmentation fault (null pointer dereference) in ext/standard/url_scanner_ex.re).
• pdo_firebird
  • Fix bogus fallthrough path in firebird_handle_get_attribute().
• phpdbg
  • Fixed bug GH-13199 (EOF emits redundant prompt in phpdbg local console mode with libedit/readline).
  • Fixed bug GH-15268 (heap buffer overflow in phpdbg (zend_hash_num_elements() Zend/zend_hash.h)).
  • Fixed bug GH-15210 use-after-free on watchpoint allocations.
• random
  • Fixed part of bug GH-15381, checking getrandom availability on solaris.
• soap
  • Fixed bug #55639 (Digest autentication dont work).
  • Fix SoapFault property destruction.
  • Fixed bug GH-15252 (SOAP XML broken since PHP 8.3.9 when using classmap constructor option).
• standard
  • Fix passing non-finite timeout values in stream functions.
  • Fixed GH-14780 p(f)sockopen timeout overflow.
  • Fixed GH-15653 overflow on fgetcsv length parameter.
• streams
  • Fixed bug GH-15028 (Memory leak in ext/phar/stream.c).
  • Fixed bug GH-15034 (Integer overflow on stream_notification_callback byte_max parameter with files bigger than 2GB).
• tidy
  • Fix memory leaks in ext/tidy basedir restriction code.